tpm2.0-abrmd-2.4.0-150400.3.3.1 < > , gp9|(94.*rFLѲuGOk
{Sopy|Z,;&_@gJWU*& ^5?;f Hڷ؇X$qԅ uZqs:R{TQQ4w&K#R"c8 PN u.>xA; ^gU=Y2ދ'.">Y.Ǎ`T3$/1*n Puh(:B|4q &7fCpm' ڤy9 _ > F H ? G d " p ( , 8 < U v
$ @
\ b
x < d ( i ( 8 9 : d = A > A ? A% @ A- F A5 G AL H A I A X A Y A \ A ] B4 ^ C
b D
c D d E: e E? f EB l ED u EX v E w F x G( y G` z G G G G G C tpm2.0-abrmd 2.4.0 150400.3.3.1 Intel's TCG Software Stack Access Broker & Resource Manager for TPM 2.0 chips The tpm2.0-abrmd package provides the TPM2 Access Broker & Resource Manager.
This is a daemon service that coordinates requests to the TPM2 chip via
Intel's TPM 2.0 software stack. gH01-ch2c SUSE Linux Enterprise 15 SUSE LLC BSD-2-Clause https://www.suse.com/ Productivity/Security https://github.com/tpm2-software/tpm2-abrmd linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
[ -x /usr/bin/udevadm ] && /usr/bin/udevadm control --reload || :
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in tpm2-abrmd.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable tpm2-abrmd.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop tpm2-abrmd.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in tpm2-abrmd.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart tpm2-abrmd.service
) || :
fi
fi ] " *U D ) 큤A큤A큤 gggggg`!Z7` ` gYD2gg037447a35f22215da2eb6f9be62659a4377548582f59d9c8333c181e06759d30 1c861611023337ecd42c7234aa6d03b5a02cd52bab8735a89ec6fde7f14feced efd64e20ed459cb48c4203b6854898047050c3f4bc85c29a7594548867d0009e 61b976a22c3ac07a07d735380bb75e7b857c20d8bec84c4805577c6780d1aa22 127f2132610b51bf200561a380f85e45cd4b63e80f99beb2edc6b2f62830dec0 57e9f24b53c3405d2eb6ffb445b5fd78a2ec8e047203199acd61e72e0f032fd7 5a6f94246556e1583412ffc8200d6979efc1aba6e77479da6d59107586b1357f 07144657dd41354b9ceca1838b1b9392e831d781b42e144542f6818e58336117 18c1bf4b1ba1fb2c4ffa7398c234d83c0d55475298e470ae1e5e3a8a8bd2e448 741e36049f00499d8f8121cb76b99361cb58aafcb8f63f81ea00e44fb774ae8e 54c83c72b541db71de0006fb48dcf643bf2cf5c98f446649bee50931cdc94258 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root tpm2.0-abrmd-2.4.0-150400.3.3.1.src.rpm tpm2.0-abrmd tpm2.0-abrmd(x86-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgio-2.0.so.0()(64bit) libglib-2.0.so.0()(64bit) libgobject-2.0.so.0()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libtss2-mu.so.0()(64bit) libtss2-rc.so.0()(64bit) libtss2-sys.so.1()(64bit) libtss2-tcti-device0 libtss2-tcti-tabrmd0 libtss2-tctildr.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) tpm2-0-tss user(tss) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gd
a@aaz`@``@_t@]@]c\\@[Ѱ@[
@[t[[m~@[;e@[:[6 @ZZ ,@YKYYp@thomas.blume@suse.com aplanas@suse.com aplanas@suse.com jsegitz@suse.com gmbr3@opensuse.org gmbr3@opensuse.org aplanas@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com mvetter@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com matthias.gerstner@suse.com - make sure that udev workers have finished before daemon-reload
(bsc#1231071) - Version 2.4.0
+ remover syslog deprecation warning (bsc#1185154)
+ cover update to 2.3.3 (jsc#SLE-17366)
+ contains reload fix (bsc#1166936~
+ fix tcti loading using short / long names (bsc#1159176) - Warp selinux into a bcond - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_tpm2-abrmd.service.patch - Move selinux devel file to devel subpackage - Update to version 2.4.0:
- Service start depends on systemd device unit: dev-tpm0.device.
- Numerous memory leaks.
- udev settle service deprecation warnings.
- StandardOutput=syslog deprecation warnings.
- Add selinux module files
- Move dbus files out of /etc - Requires libtss2-tcti-{device0,tabrmd0} (bsc#1187077).
In MicroOS systems the recommendations are not installed, making the
service fail to initialize: Failed to instantiate TCTI - update to version 2.3.3:
- changes in version 2.3.1:
- Fixed handle resource leak exhausting TPM resources.
- changes in version 2.3.2:
- Added cirrus CI specific config files to enable FreeBSD builds.
- Changed test scripts to be more portable.
- Changed include header paths specific to FreeBSD.
- changes in version 2.3.1:
- Provide meaningful exit codes on initialization failures.
- Prevent systemd from starting the daemon before udev changes ownership
of the TPM device node.
- Prevent systemd from starting the daemon if there is no TPM device node.
- Prevent systemd from restarting the daemon if it fails.
- Add SELinux policy to allow daemon to resolve names.
- Add SELinux policy boolean (disabled by default) to allow daemon to
connect to all unreserved ports. - update to version 2.3.0:
- changes in version 2.3.0:
- Add '--enable-debug' flag to configure script to simplify debug builds.
This relies on the AX_CHECK_ENABLE_DEBUG autoconf archive macro.
- Replaced custom dynamic TCTI loading code with libtss2-tctildr from
upstream tpm2-tss repo. (requires tpm2-0-tss version 2.3.0)
- Explicitly set '-O2' optimization when using FORTIFY_SOURCE as required.
- changes in version 2.2.0:
- New configuration option `--disable-defaultflags/ added. This is
for use for packaging for targets that do not support the default
compilation / linking flags.
- Use private dependencies properly in pkg-config metadata for TCTI.
- Refactor daemon main module to enable better handling of error
conditions and enable more thorough unit testing.
- Updated dependencies to ensure compatibility with pkg-config fixes
in tpm2-tss.
- Fixed bug causing TCTI to block when used by libtss2-sys built with
partial reads enabled.
- Removed unnecessary libs / flags for pthreads in the TCTI pkg-config.
- Output from configure script now accurately describes the state of the
flags that govern the integration tests.
- drop fix_dlopen.patch: no longer necessary since abrmd not uses the tctildr
shared library. This one hopefully now does the right thing. - update to version 2.1.1:
- changes in version 2.1.1:
- Unit tests accessing dbus have been fixed to use mock functions. Unit
tests no longer depend on dbus.
- Race condition between client connections and dbus proxy object
creation by registering bus name after instantiation of the proxy object. - bsc#1130588: Require shadow instead of old pwdutils - update to version 2.1.0:
- changes in version 2.1.0:
- `-Wstrict-overflow=5` now used in default CFLAGS.
- Handling of `TPM2_RC_CONTEXT_GAP` on behalf of users.
- Convert `TPM2_PT_CONTEXT_GAP_MAX` response from lower layer to
`UINT32_MAX`
- travis-ci now uses 'xenial' builder
- Significant refactoring of TCTI handling code.
- `--install` added to ACLOCAL_AMFLAGS to install aclocal required macros
instead of using the default symlinks
- Launch `dbus-run-session` in the automake test environment to
automagically set up a dbus session bus instance when one isn't present.
- Bug caused by unloading of `libtss2-tcti-tabrmd.so` on dlclose. GLib
does not support reloading a second time.
- Bug causing `-fstack-protector-all` to be used on systems with core
libraries (i.e. libc) that do not support it. This caused failures at
link-time.
- Unnecessary symbols from libtest utility library no longer included in
TCTI library.
- changes in version 2.0.3:
- Update build to account for upstream change to glib '.pc' files
described in: https://gitlab.gnome.org/GNOME/glib/issues/1521
- added _service file for syncing with upstream tags - add a Requires towards tpm2-0-tss, because that main package holds the udev
rules and logic for setting up the tss user. Without this the daemon can't
start up correctly. - fix broken build due to newer glib dependency that reports a full path for
gdbus-codegen, breaking the configure check. - update to version 2.0.2 (FATE#326270):
- --enable-integration option to configure script now works as documented.
- Format specifier with wrong size in util module.
- Initialize TCTI context to 0 before setting values. This will cause all
members that aren't explicitly initialized by be 0. - add recommends to the tcti-device and tcti-abrmd. Otherwise they're not
installed right away, rendering the abrmd quite unusable. - Update to version 2.0.1:
* SessionList: Fix Connection object reference leak.
* source/sink: Organize ControlMessage processing.
* CommandSource: Replace 'connection-removed' signal with ControlMessage.
* SessionList: Remove all locking.
* ConnectionManager: Remove 'connection-removed' signal.
* ci: Build 'check' target when CC is gcc.
* build: Fix bad URLs in configure script.
* CHANGELOG.md: Add version number and date for 2.0.1 release.
* Replace references to drand48_r family of functions for portability
* Fix for type-punned pointer reported in newer compilers that enforce strict aliasing - Trying to fix build on older distros that fail because of a missing or
broken autoconf valgrind detection macro. Removing autoreconf to hopefully
fix this. - add fix_dlopen.patch: fixes an issue with dlopen()'ing the tcti-device
library from tpm2-0-tss. See
https://github.com/tpm2-software/tpm2-abrmd/issues/486. - update to major version 2.0.0:
- support_dbus_activation.diff: removed, is not contained upstream
- the tpm2 stack introduces an incompatible ABI to the previous version with
this update. There is no compatibility layer, libraries have new names
etc.
- upstream changelog:
[#]# 2.0.0 - 2018-06-22
[#]## Added
- Integration test script and build support to execute integration tests
against a physical TPM2 device on the build platform.
- Implementation of dynamic TCTI initialization mechanism.
- configure option `--enable-integration` to enable integration tests.
The simulator executable must be on PATH.
- Support for version 2.0 of tpm2-tss libraries.
[#]## Changed
- 'max-transient-objects' command line option renamted to 'max-transients'.
- Added -Wextra for more strict checks at compile time.
- Install location of headers to $(includedir)/tss2.
[#]## Fixed
- Added missing checks for NULL parameters identified by the check-build.
- Bug in session continuation logic.
- Off by one error in HandleMap.
- Memory leak and uninitialized variable issues in unit tests.
[#]## Removed
- Command line option --fail-on-loaded-trans.
- udev rules for TPM device node. This now lives in the tpm2-tss repo.
- Remove legacy TCTI initialization functions.
- configure option `--with-simulatorbin`.
[#]# 1.3.1 - 2018-03-18
[#]## Fixed
- Distribute systemd preset template instead of the generated file.
[#]# 1.3.0 - 2018-03-02
[#]## Added
- New configure option (--test-hwtpm) to run integration tests against a
physical TPM2 device on the build platform.
- Install systemd service file to allow on-demand systemd unit activation.
[#]## Changed
- Converted some inappropriate uses of g_error to critical / warning instead.
- Removed use of gen_require from SELinux policy, use dbus_stub instead.
- udev rules now give tss group read / write access to the TPM device node.
- udev rules now give tss user and group read / write access to kernel RM
node.
[#]## Fixed
- Memory leak on an error path in the AccessBroker. - update to upstream version 1.2.0:
- Limit maximum number of active sessions per connection with '--max-sessions'.
- Flush all transient objects and sessions on daemon start with '--flush-all'.
- Allow passing of sessions across connections with ContextSave / Load.
- Unref the GUnixFDList returned by GIO / dbus in the TCTI init function.
This fixes a memory leak in the TCTI library.
- correctly trigger udev to update /dev/tpm* permissions after package
installation. (bnc#1078687)
- prepared support_dbus_activation.diff patch which adds D-Bus activation, but
can't use it yet due to rpmlint - fix_service_paths.diff: fixed broken systemd service unit (bnc#1066123). the
service unit file in the upstream distribution tarball is already configured
and looks for binaries and configuration files in the /usr/local prefix
which is wrong. - package version symlink correctly, belongs into the lib package itself, not
the -devel. - update to upstream version 1.1.1 which fixes some local denial-of-service
security issues among other things:
- Replace use of sigaction with g_unix_signal_* stuff from glib.
- Rewrite of INSTALL.md including info on custom configure script options.
- Default value for --with-simulatorbin configure option has been removed.
New default behavior is to disable integration tests.
- CommandSource will no longer reject commands without parameters.
- Unit tests updated to use cmocka v1.0.0 API.
- Integration tests now run daemon under valgrind memcheck and fail when
errors are found.
- CommandSource now tracks max FD in set of client FDs to prevent unnecessary
iterations over FD_SETSIZE fds.
- no longer call bootstrap and switch to the release upstream tarball which
has now been fixed to contain all necessary files - first version of the new arbmd resource manager from Intel's tpm2 stack.
This will replace the old resourcemgr previously shipped with the
tpm2-0-tss package. /bin/sh /bin/sh /bin/sh /bin/sh H01-ch2c 1736768995
2.4.0-150400.3.3.1 2.4.0-150400.3.3.1 tpm2-abrmd.service rctpm2-abrmd tpm2-abrmd com.intel.tss2.Tabrmd.service tpm2-abrmd.conf tpm2.0-abrmd CHANGELOG.md CONTRIBUTING.md INSTALL.md README.md tpm2.0-abrmd LICENSE tss2-tcti-tabrmd.7.gz tpm2-abrmd.8.gz /usr/lib/systemd/system/ /usr/sbin/ /usr/share/dbus-1/system-services/ /usr/share/dbus-1/system.d/ /usr/share/doc/packages/ /usr/share/doc/packages/tpm2.0-abrmd/ /usr/share/licenses/ /usr/share/licenses/tpm2.0-abrmd/ /usr/share/man/man7/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37038/SUSE_SLE-15-SP4_Update/2f2edf91f289d7c3e766ee94f4531fbe-tpm2.0-abrmd.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a92c828c29a5ba40dbbff698d81fcbfd152b595a, stripped exported SGML document, ASCII text directory troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R
R R R
R R R R R R G -Ak utf-8 adb01adbb9ff8076dba1c84801ef075a3305993db5fea60c8214eeca994590b3 ? 7zXZ
! t/p_O8] "k%n>6"0{XP- 2
@Ύ/%a48HacK> l?6Ţ,ZH8nca~*(/$.J-tb|HS*7i\!ԑ&G>(E`3$;; P4C8`R{hڴӌ?G*/w2TC]=ű`+њu,IX?-m|n3S|WR|
楈 P4ba5`f+^+,"IkHc>ZRǃH@5FOw*Z;`'f Ẍy3/| JV-S ;(ڐ` P _{:0!KN6かDf@N;ŴeڊBGkRCݶ'7O|e-mV2 #4g9WK4 >[fD~a
DE:5-\8@}P 7zG݊~0Jj=zdj^GdQ5@yRRDȂ5ݰ.U1em]QPp0 b1C^FeF$h t2?X@7E>uUkP3t bCr
]:pY~@&M jE
e AO;՞ 6gMZ86 DBPyS0 ^CQ&$)cc70dP0ԲF^j rh?ºVWw[*X1'S
M ~OuYK%]O!w ^
,D57jȬ8[S0~a[K3~W9 b10=kR1hG^`{ۡ:)J4lwr",:iơ#)![+ I=9uK n`̷
s&FVf H,$ X98p^*b`j?eYHHyӨ}z_'=Hn)d҃\#7z`vi X|RԌSrCDBO6"C-$|\Uf"i)}rҴԼiKqeʖ7Y$ϴI 8`8=8m jZ1|VraX3E%bi $|p^+~%Ɂ H
Ypa03W(BlLZ,͢V;
w gޯAo(v4{
;
8cvݘwPT(VjJ rD{-^/oR~XO|lwR{a*RkO^ p?-bp`WG8eF'x83H; 0@uI5ttxs>A 0~F ,P_.c@vg+V]h<Ô&!1p8i6s݃DwrC j/m /4b$ad`L"zs|ʴ.Ny9g6 e}}̧A0,Y 2j
qw(3t 9>yy:6c 6 E&ЋA֊k#N*4F{3h*1M+ˬ>xQzg1E3$}MޓqDkY.gz&Z":y ׆=zÂ~ǡ / gy2ݸbϱi(EP`u 龖5Ϳ%dqEr\:+וqaUA, 2c](jߞN55RRYh QLCEf {"a,i pyb0MgյjVd'AHF]JMzM!AoQC ~^8Gݠg{rKQQ+&s)@g,@s/$%=<RiNȵb2h^THrwK\)"7Ңx%&
*EXCpF*6x ýֳ1༿Ti|bl)< /E3;*@W?HuC3{gʛ_rӃf3~*hn!=($/,*n \mW}ΝD^ug驮)I PLY7uAb%N?%ɶ[df>sT Hݭga)W6)~y*ΐGVAr}E*!| D?7Z ! M S 8˾BwBexq9)
H/ҟB_bNz>De1I4= 㱶fD`"MO$֎ ܐ%Yˣ4uϝW067!G ז'wcd&ܦbFi4ڋsvyOx;݃]K9RZ ; W!ѦWS]{ oD
|&, 5أϖ0S 3Nh8Àp^ 2=xg>Jϟ Qם _M::HdGgE4j熊7qNwU[i%s $-cR4%cS*!7/J}1V:c O:+ q\/4}DvU# WK|Bmv\42LtCPFtkm^)tD+cݝ',QS rZ= (dx W0a8b6`o?E2ՆFA9bD:"gq`.2b>?:1+Z낃~q8 ;|Y_ ޡţ[ Xu[Prɶ%Z2"PJ2S XqŢXx\gZI/G8ZVߢtR3v8 U}F: S +txbwK-H5IX*!6VwG
6Rgj_>̓OCMl//#EdIvC Q ,}O@2U 9T;sBN}_J_X8oE+ lN Wl/, b1P_bEEoFY {2J֝>aU!]7LO5
P3Z^:﹝. )Ek#=c('%On@
Kkmh@z_dg{ +!tP ck1}Aݰh na$?aXiMqsiG.Fڛ0U@i8zOOm @>A^_eU$ PT|cPWobf.Ju F{BmK _qqNԢ4ZO+GćMт A2Ȣ%1o< s>ѹ1yAjo5u#DK(s&E~+)=E ];6R8?d-UNM٠WИlٹi ?g6u )zFd o($DwU{傐0gx<+/M:S! Qԁ42̼(?86MȊ4!;MBKC Y[N7N 댲'::P!CKkR6[,
@FgZJc>O)J1\v5 3lG1XF&4'/q fn1lwFyDV6C,~~pxdՒ%W<T/GEqتK.
]Y F^#bY
hrG}'Sȯ BG!
m;9ep.v "0P2ňTԟEʨs&|*Ki``. u-ZrZn-^ pbE*z19'ks]
\qSeM \yK6voW}('^0)L
xWA #fә.wo=u4պqNJ&r#V?jݩMdpdat"0Nٲ?37B,іM 6іVjx_YçulKjBF*x$?! ?~*y ١<$n-gx@. +ZE9vͻ丐plLB V!_(6 B)DsˊKD<9
rȟ=QXwcO-d C +媓>`"ZwB+٢, l+:SzD?{sr )Y!RZp{fWH -l T 9afhݵt(M'jamMMO w_":\`'r .T*D`{7\:KbF#tcANV . M^ l%]Rh p]wsZhWB`Y^4ˍA 1kA?˗.1WP@]td388P.6[a>`[%:à<<˽g ,p 0PQr3N,'@T0' !!5Ye1Bmԧ!G7J$)! q@־VMamN7?'mcK I)}K#Io*(ulkr=
++o0x
CHVP(Ιo&;9Iy$` uiM(oMPxC1bb:6n69P$1 Cj*m$mMjUkq%0 QĦj RO j#B%WsB;va=/VY¤.쥂5K7&Bu~ٛ¦G\jqør5hʈ gͲV} ۷} ¼FX!CD=:Ƿ]*P?FH9g v*_{ lV6
`)lW=lB)}թM
6.hF-
hc`1Lt>d
.2n;z^Jh 2l_/q%Zǝ֫^Ki-3 Ed6^*]r1n.Xj^AmvʕY ˺!bQ-O6ܣXY~O>^q왕.n:D\=|ۍ*jJ uEsq<WA~.J \
Ypj. j3%~ >3)&60R}X;z[8uLMN
wyh\(HJ.'3^i4Χz] (Yos Ϟ$/g%[h݆% m{4V:'CR2VΜcoRBik(2 ]xB \Z1tu]&
6yؔ )2<;Y-5[7W}ڭL Sܞ`1k_,Fn
HmJAPLjI]_?mR@r L66x7&jمNbI-E_寺 % i]1l v Ѿr˧ZK2`)HHk&t reɷP)Z_p9QW 0` Ub3""ir:༁)}~PW?gQVypاf l@ ,Y 4h0 *܅$4#q S]]ceD/&&T1 4*@\/o'7O;"(Ucol'QBf7ލ]0# ( Qr
rmEitY/EN }:x?=#L\+tp1_I;<bxmZU8T. J/2\Jq}A}s8zb o ƙHW/{N᫄iCu "!a^8G0g=u c
QvYFAVM}lfEz\־< Y n!
M5^Wd\ \F(#V #kA?F1xurmD>K :otTRgDϡ$?k("CWU?7nesFlB&^)}$
TfFO;/ ;$K"t\ /V-Di廰{Zm\yƺ `Ql*qX*,mP#% + .Ca|)Cd I-L0 ߉He{'5F%D38V~|\_ q O y$vd >4 mX,e)!wġqJ29b gI=<)o*L ysqVZ.\V\ %,uoH5i >n#!~gG-NqLN{.ӪDl gfD($EuwAю|-K_* &sؓ-{s衧d?Iҹ]R1z4`\T4B0\x> !N^:d-uð9-j8DUq 0|5S旼u_^FG(=˅x^ ~T9 ˼.R1O7f`@"[ KV6%# 35]f$%,+
] Fv ,C gF5>8} I{ IN |92 !*YC_4Uف)6[KPy1d% ʍ!@_2*:2rذVkp]ܳ=H+aۉqU;3F-hmheBbH8&-YqF\fpFdk"nq`!U:J|\sc#/RBIڷ|!\o~ n^?N0By uQiU8w`|qQA 6cQ(c':[A
s3/Ǡo$V#&.wt j
rD8,!ĕ%jƆTZ j^*igOz* C(i(
GKDo8llRx6j0 G4 9L(㠷c3d
7%A {Waވ UvR|px7 u27,}~^FTL
wyNxf;U["O!3Q
6fv㮄D &xVd kۊ wcKA>1:r>3jné1ZdR@N 3*Kb `F2fLDء7dl=][MUa`
#.艞)=siNWK yCߴ3@oL>JaW :rT7[ nqյQ'vhzrD4kW
$t\ ҧTH:"kSb
N
Ɨ rX kr4kBNEh>`ΈSH5F}|sA6~©/a meRgdQ&y!Bٻ `+]r :ho?s)e 4tu-ڃ~þ\FO l=?
J$< 7_mu'+U5 e6Mnў,p}53h My#-My8 5jI.\Bog_ )nbv¯$$\ \Z[
YiJ\Ih1bϓ83 M < 7?S]89c/8Fq X`h&v@6m|G\{ \ 0+װ a)MvHA
8j!p^}˖/S~?;f]JA]OSvPj}173j,q Ew̠o&_W70C`]gxӯ<>z; $_^j%͗pI[ns|(猯6.pa<sJSީj[Dg _FXr]- m(Z
Y@# q 0@2Gb; A 4hN`>/Ŵ&ڢ_ ZL̮7 ,TLթ&0U`2vS4V9 r\t
KR**2x ##Y!LQ>72<bxg >)fMCyt Y Dw_]KQȵĘ lDnc/+{z1TC0⽊h聠)hnsxg'в"\bʦd7r% 2]Ӕǟ`-<^Ȉ|.ڎ 1% R$vSoxis+:[E^u n3V*H٣w-C]'y]a ?M3a~B+DA ԇ]bSbWYN8m+sjLC8G3m.>za]3%Sr3/#? r {S
:͈i*ckE+l%zza"F|HI@<*?gUQ&<[w3ʝעa犟 woBa4a4N&Y0V<
_Fr@GG4Aȓ4'RO! 'כcW^L
ِ0V:c~ wIڮ[)>NV> NgvEM@:ݠP(;gMFbxyp (j 1dȽf ZPb-ӝ W\Nl`nҹ|3z8!Z)C\
Ԯ\p x}@"Ƽz҆x w3A'^;saW,K_ǗWlExckA5bH* - 2QxwHM. sÕ Q|u2#'9}cu?Lpu6 1Ylq!l{%G%T1/ĉJ3;w鶏%|ҟ }X5; 7nj!*߷:B lc+"ӞtOX W o&)TWq@(Vng ΥR~|rQ :C ~xdaJG3SrbemiD|eQ'BA{*rF `=~rie-[ı40kV@_HInD/ |I$giU(VĴ%lB|i@#?C7PXk E͛*v@IzMnX°}>hƧRE@_ + e0d=94;p"t#wӘp& 9&hV +ſI6i$_T$$o$f74] wFd lםJRb$ n,!hw6x:% ; .I L5`~Qa
nm&ˉyx+3Pg9Wlɪ' _p #% 76^sz*V0[Ҹ' V2VE&jиB;dPL$0OFNM6_it!,y1ju&{وw >t ?k0 y +2[H,*Łnq!}W_dyp`!I;+5͓=1+, hg9M!i>?i #z DQ2=]n-iλւ_ᒹɷ*H)$®^A%v_cSeB z0 DMXM =@`2RJ`9&Gu $@̔S`DǞq/]m**LZgt _Odə s_EHGEAL\9Pv gY} PY;nݰ!)P
8
&%MC8CzY|XQDv)QAд5V_wZ@
-4RB" Na m5㬕z"Q<ީ+tѮ]4FYʸEz}Zߩ$ ٩
iz(킻C`w ZqsjpK`i hOsN/eAxm )5VzT 3X,/FW|~,v\k\ JFi!>NPC 7eJ3+ cljq4-Ŏo3DQtVbg+~> l܄ @N S2+ m(E̾DSx]ڱKoLOՖM .; yc8`#2\|Zɯ zaqUs!PJdcAR3
$
&ĸhI9LY#pzaݍHj>غؙoUka˶ZDpm0= ɻ q1kpzlE/E9HB e: ^Fn^
aտJ4}8 @|,n
ur!
&& w@>P i*A|8f|;\Za%˷zUH/ geݪjk}dA?9
aEw{]w9_KÜ=UwsRA0Dzafݢ :tVQy(PsOkxL/ Q`7*&c- .oL,7Z, }Ht8A_QFs ?WLd!$'<3 DZ
``O$ I~F&@ T`|ЖX0 3c-c+kwm/k N0y;b!Mm&P~,ѧ ӏnu~֤.95 $II ! Tֻ
`qZ j0g,;TD+{0 |L/uoEDLIKFRv^OZ#gs_ՇJT XĵK~ Q֛J(oXu\!G1LV,d
:zUStڂ/a*!".iKrТE$c3K#-Y(c&=-r2JW,~>D.?2XpS5V}w xhx7g]WZy./ lT@So.bWJ$ lD23n PSI$;` nrx8<X l>9@` ifkOBjupI\c0qo!ԑTm;|e}b³fᘧK .n4(LCum_?t}&;m ~ס 9+jLz 5;H:Yc+^2H0SfQ$_$JvK("?k@7H(z#B~1ܹ@t6X)|罼s7t}x;Y5w
k婫 L"|hRE/W baܗz5:V:&N
`ɯe<7(3
^ͯhm5}Ct3=Աy02 8gR,/ vDzyL6`H F[nhDw?klcI:4=x ?|cB_Ăex+J+aI_9 Yo֗Y, Da.M>Ai 'Y{4#*QЙz,-HS knj x ̮3~(~C+:s6oޅri8Wy1#T(zIYd`j̲jjjx&OF$5QBmb-]/ SZD*}闄 IIO~ބ6ybH! shU5Vz 1,G!GtvM8VPj((p=䛩aI=]QJy3ÌM-8e ?
*S"hC qү G|^@`{/5;8 l%ўI0R-(M?Z.*_;FXW3}
?2ľR> KCT0C\xcܒ7)e8!6嬳=U X %_BAf
bΧL X 0G$UȍusS 2PX^Awo7:O1bk,1uA4rT8Zilb# ΦtٸxE l&6 ,!hMDv^Bw H,)ri=ӝ
P0C#8-%XW}[r-Tkrά`N3&&`zh/*[iIO"F*|)[H(_
3 +jge${&RekZ>4W9X06 l!fz'R$w ?A
Ev2|11^V^|Ud(`L8? .h[Gڿ$cQjpFG;` rR4&)FcEdQxi1{,.nƦ Cu v]75/1֪-
kd$joJ Uk[N CDvUg癆Һ_ S
9D +#L
lU-J !d 7
~Y; Ų%k>\),>Y}F8[ R +Z-.6W_wsjTc;~Y==Ƭ ƨqXc#ӡYNj6@ߒ[_+Q%t6~1$~[t4,;NS-C P @/ H+D)F$jJk kBwԌ됲3 RM!Lؔc ́yO.b9/CICwojJ6~V/_7﮷딠چGf-Jtk(V2Ġ4E>*(A,v{xѾy*I) mcRn91 /C ę>^U̯~
8˕TǢë\sJ5A<^]D gB>i4(zCwZ yCViP -[2PL{6 iHq| Vc ;=yЭ[;]MpVc֩,Z?邻-݀곚/:PQculTJ(i2 I=<; ]JH҉G)I9vE ?V; eR\7:}1ԫ_I_ qQIu%vC}-eP dE짎E XP]~l<хڮ 1b`9jM ,Ԏk %C 0? QZtQ:;SSyEm4bklD o-뼎ª.so"~2)CTT$A: eqU%pv,EmgSCF\ բs0[}_]oP-!AJj? ?i8C $OwR jTIMRuYtV$TdɛXܓ/Cy{_HV<}MLl:O&
.c S3%&4 u@r̆ m2u?S 2|\w.
aFD)*,KȫG>0+ ;ƒ
.4!:2{*4.NÊy7^VjJA _6Tp/82u >]3b0l'Ȟ2dNiWW7қ;όJ6,JL+975fEC8ڌr# 9rs.Js=p1h5u+c9.! l4g˅ 71ӵ7FVm;&@v</*ao?@fxR L1EW#i((> Q(Aw_~h7m;oɡP+8&łu*ьX0jMwX H6f_O(:D Н#ksܫ@_\YXcO'*κ1IxAGcss6顖a)<'j.8\jT|{:ᮀ 0LW=PAQ- V+:$Uu/j*tl&MTj
YZ